// REFERENCE

SVG signature

Signature (hex): 3C 3F 78 6D 6C / 3C 73 76 67 Medium risk

An SVG is XML text: it usually starts with 3C 3F 78 6D 6C (<?xml) or 3C 73 76 67 (<svg). Being XML it can contain JavaScript: uploading unsanitized SVG is a classic XSS vector.

Related tools

Work with this in:

Related

Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.